3rd party dependency is outdated
devfox-se opened this issue · 1 comments
devfox-se commented
Our project uses elasticsearch-curator and celery, both have dependency on click 3rd party module.
We want to upgrade celery from version 4 to version 5 due to security vulnerabiliy, yet due to dependency conflict between elasticsearch-curator <-> celery the upgrade is impossible.
click<9.0,>=8.0.3 (from celery==5.2.3->-r requirements.in)
click<8.0,>=7.0 (from elasticsearch-curator==5.8.4->-r requirements.in)
click's latest version is 8.0.3 and it's backward compatible with version 7. would be amazing to see curator updated to support latest version of click asap
untergeek commented
This is resolved with the release of Curator v6/v7/v8